{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,3,23]],"date-time":"2026-03-23T12:06:33Z","timestamp":1774267593159,"version":"3.50.1"},"publisher-location":"New York, NY, USA","reference-count":14,"publisher":"ACM","license":[{"start":{"date-parts":[[2011,3,21]],"date-time":"2011-03-21T00:00:00Z","timestamp":1300665600000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2011,3,21]]},"DOI":"10.1145\/1982185.1982227","type":"proceedings-article","created":{"date-parts":[[2011,5,17]],"date-time":"2011-05-17T12:59:14Z","timestamp":1305637154000},"page":"185-190","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":12,"title":["Time based data forensic and cross-reference analysis"],"prefix":"10.1145","author":[{"given":"Xiaoqin","family":"Ding","sequence":"first","affiliation":[{"name":"Shanghai Jiao Tong University, Min Hang District, Shanghai"}]},{"given":"Hengming","family":"Zou","sequence":"additional","affiliation":[{"name":"Shanghai Jiao Tong University, Min Hang District, Shanghai"}]}],"member":"320","published-online":{"date-parts":[[2011,3,21]]},"reference":[{"key":"e_1_3_2_1_1_1","volume-title":"File System Forensic Analysis","author":"Carrier B.","unstructured":"Carrier , B. 2005. File System Forensic Analysis . Addison-Wesley Professional . Carrier, B. 2005. File System Forensic Analysis. Addison-Wesley Professional."},{"key":"e_1_3_2_1_2_1","volume-title":"Windows Forensics and Incident Recovery","author":"Carvey H.","unstructured":"Carvey , H. 2004. Windows Forensics and Incident Recovery . Addison-Wesley Professional . Carvey, H. 2004. Windows Forensics and Incident Recovery. Addison-Wesley Professional."},{"key":"e_1_3_2_1_3_1","volume-title":"Windows Forensic Analysis","author":"Carvey H.","unstructured":"Carvey , H. 2007. Windows Forensic Analysis . Syngress Publishing . Carvey, H. 2007. Windows Forensic Analysis. Syngress Publishing."},{"key":"e_1_3_2_1_4_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.diin.2007.01.005"},{"key":"e_1_3_2_1_5_1","volume-title":"NV","author":"Foster J","year":"2005","unstructured":"Foster , J and Liu , V . 2005. Catch me if you can. In Blackhat Briefings 2005 (Las Vegas , NV , August 2005 ). Foster, J and Liu, V. 2005. Catch me if you can. In Blackhat Briefings 2005 (Las Vegas, NV, August 2005)."},{"key":"e_1_3_2_1_6_1","doi-asserted-by":"publisher","DOI":"10.1109\/SADFE.2007.22"},{"key":"e_1_3_2_1_7_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.diin.2004.01.002"},{"key":"e_1_3_2_1_8_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.diin.2004.10.002"},{"key":"e_1_3_2_1_9_1","volume-title":"Digital Forensics Research Conference","author":"Buchholz F","year":"2005","unstructured":"Buchholz , F and Falk , C . 2005. Design and implementation of zeitline: a forensic timeline editor . In Digital Forensics Research Conference , New Orleans, LA , 2005 . Buchholz, F and Falk, C. 2005. Design and implementation of zeitline: a forensic timeline editor. In Digital Forensics Research Conference, New Orleans, LA, 2005."},{"key":"e_1_3_2_1_10_1","unstructured":"Carrier B. The Sleuth Kit. http:\/\/www.sleuthkit.org.  Carrier B. The Sleuth Kit. http:\/\/www.sleuthkit.org."},{"key":"e_1_3_2_1_11_1","unstructured":"AccessData Corp. Forensic Toolkit. http:\/\/www.accessdata.com\/forensictoolkit.html.  AccessData Corp. Forensic Toolkit. http:\/\/www.accessdata.com\/forensictoolkit.html."},{"key":"e_1_3_2_1_12_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.diin.2005.07.003"},{"key":"e_1_3_2_1_13_1","unstructured":"Russinovich M. E. and Solomon D. A. 2004. Microsoft Windows Internals Fourth edition. Microsoft Press.   Russinovich M. E. and Solomon D. A. 2004. Microsoft Windows Internals Fourth edition . Microsoft Press."},{"key":"e_1_3_2_1_14_1","unstructured":"Carvey H. The Regripper. http:\/\/regripper.net\/.  Carvey H. The Regripper. http:\/\/regripper.net\/."}],"event":{"name":"SAC'11: The 2011 ACM Symposium on Applied Computing","location":"TaiChung Taiwan","acronym":"SAC'11","sponsor":["SIGAPP ACM Special Interest Group on Applied Computing"]},"container-title":["Proceedings of the 2011 ACM Symposium on Applied Computing"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/1982185.1982227","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/1982185.1982227","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,18]],"date-time":"2025-06-18T10:52:20Z","timestamp":1750243940000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/1982185.1982227"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2011,3,21]]},"references-count":14,"alternative-id":["10.1145\/1982185.1982227","10.1145\/1982185"],"URL":"https:\/\/doi.org\/10.1145\/1982185.1982227","relation":{},"subject":[],"published":{"date-parts":[[2011,3,21]]},"assertion":[{"value":"2011-03-21","order":2,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}